Privacy Policy
Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Lena Engel Lena Engel Weddings Johannes-Timm-Str. 8, 81373 Munich Email: info@engel-weddings.com Phone: +49 152 29556140
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).
2. General information and legal bases
Protecting your personal data is important to us. We treat your data confidentially and in accordance with statutory data protection regulations (GDPR, BDSG, TDDDG) and this privacy policy. Processing takes place on the basis of Art. 6 GDPR, in particular: your consent (Art. 6 (1) (a)), performance or preparation of a contract (Art. 6 (1) (b)) and our legitimate interest in a secure and functional web presence (Art. 6 (1) (f)).
3. Hosting
This website is hosted by an external service provider (Lovable Labs Incorporated, USA). The personal data collected on this website is stored on the host's servers. This mainly concerns technical connection data (e.g. IP addresses, access times). Hosting takes place for the purpose of fulfilling our contracts with potential and existing clients and in the interest of a secure, fast and efficient provision of our online offering (Art. 6 (1) (f) GDPR). As a transfer to the USA (third country) may occur, we base this transfer on the EU Commission's standard contractual clauses. A data processing agreement (DPA) is in place with the provider.
4. Encryption (SSL/TLS)
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by "https://" and the lock symbol in your browser bar.
5. Cookies
This website uses technically necessary cookies or comparable technologies required for secure operation of the site and the functioning of the contact form (including spam protection). No consent is required for these cookies; the legal basis is Art. 6 (1) (f) GDPR and § 25 (2) TDDDG. Analytics or marketing cookies are only set after you have given your explicit consent via the cookie banner. You can withdraw this consent at any time by declining in the banner or clearing your browser storage.
6. Contact form
If you send us enquiries via the contact form, your details from the form, depending on what you fill in: name, email address, phone number, wedding date/period, approximate number of guests, budget range, how you heard about us and your message, will be stored and processed by us for the purpose of handling the enquiry and in case of follow-up questions.
Processing takes place on the basis of your consent (Art. 6 (1) (a) GDPR), which you give by submitting the form and ticking the consent box, and, where your enquiry is aimed at concluding a contract, on the basis of Art. 6 (1) (b) GDPR. You can withdraw your consent at any time, for example by email to info@engel-weddings.com.
We use the following services as processors for the technical operation of the form:
- Storage: Supabase (database hosting). A DPA is in place with the provider; storage takes place in the region we selected.
- Email delivery: Brevo (Sendinblue GmbH / Sendinblue SAS, EU). Notification of your enquiry is delivered to us via this service. A DPA is in place with the provider.
- Spam protection: Cloudflare Turnstile (Cloudflare, Inc., USA). This service checks whether the input originates from a human and processes technical information from your browser for this purpose. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6 (1) (f) GDPR); any transfer to the USA is based on the standard contractual clauses.
The data collected in the contact form remains with us until you request deletion, withdraw your consent, or the purpose for storing the data no longer applies (e.g. after your enquiry has been dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.
7. Server log files
The provider of this site automatically collects and stores information in so-called server log files, which your browser transmits automatically (browser type/version, operating system, referrer URL, host name of the accessing computer, time of the server request, IP address). This data is not merged with other data sources. Collection is based on Art. 6 (1) (f) GDPR for the purpose of technically error-free and secure operation.
8. Your rights
You have the right at any time to: free information about your stored personal data (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You can withdraw consent you have given at any time with effect for the future. You can contact us at any time regarding this and any other data protection questions. You also have the right to lodge a complaint with the competent data protection supervisory authority.
9. Status
Status of this privacy policy: 23 August 2026.
